Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/489428FEA69E11F18C3029DCCE1D38B0.roa
File:                     489428FEA69E11F18C3029DCCE1D38B0.roa (raw, json)
Hash identifier:          TtQkbg+EX4TTPg5ulGiUxRRzTJkUk4K7e/Zv4GINFKE=
Subject key identifier:   90:DD:F3:75:88:1A:9F:6B:A8:CE:68:FD:D1:60:F2:51:5C:F8:05:D7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E479
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/489428FEA69E11F18C3029DCCE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:16:58 +0000
ROA not before:           Wed 02 Sep 2026 07:16:54 +0000
ROA not after:            Sun 04 Oct 2026 07:16:54 +0000
asID:                     17561
IP address blocks:        154.198.8.0/24 maxlen: 24
                          154.198.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124025 (0x1e479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 07:16:54 2026 GMT
            Not After : Oct  4 07:16:54 2026 GMT
        Subject: CN=6a97cd6a-5fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:52:4d:5d:f9:ca:53:e5:58:b5:21:81:ec:
                    0a:c3:e1:08:24:2f:28:fc:ec:54:42:65:49:42:62:
                    25:e7:ff:21:c5:2c:ce:74:c3:fb:19:1c:ab:2d:1a:
                    73:e6:e9:50:25:f9:79:a0:27:b9:f3:bd:91:bf:bc:
                    f6:57:a9:56:f1:2c:a0:e3:bb:1e:fa:96:92:2d:38:
                    7c:8f:70:f6:b1:6f:8b:fe:d7:8d:89:cd:08:22:68:
                    23:aa:40:00:30:41:2a:e5:af:05:57:05:c7:c1:be:
                    0e:34:b4:a6:f5:b7:fa:52:cb:a0:99:3c:53:35:d2:
                    d1:8c:5a:07:09:9a:3f:10:a7:7e:14:a9:81:e5:ab:
                    81:ec:a6:24:6e:c1:05:5f:b9:c9:e3:be:0f:84:36:
                    25:90:a0:4e:f2:e7:f5:05:db:77:31:39:19:d1:95:
                    80:e0:d8:e1:e4:9a:99:1d:d9:33:b6:58:d2:89:19:
                    fc:93:e1:ea:1c:cb:02:54:60:e9:49:0c:e4:fb:81:
                    e2:b9:51:56:f0:1b:41:06:59:1f:c4:50:58:b2:95:
                    79:b4:9b:43:c7:e7:69:3d:8c:a4:12:aa:a2:99:32:
                    4f:33:f3:95:b8:eb:99:35:36:43:ba:09:22:b0:2e:
                    26:dc:90:46:64:5c:97:89:ac:5a:ff:61:e6:15:b2:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DD:F3:75:88:1A:9F:6B:A8:CE:68:FD:D1:60:F2:51:5C:F8:05:D7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/489428FEA69E11F18C3029DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.8.0/24
                  154.198.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:30:c1:28:76:f1:29:03:62:79:92:d9:95:e0:2f:0e:51:
         cc:61:cb:5a:5c:1c:cb:3c:21:0a:56:08:10:1f:0a:a7:46:04:
         37:14:62:53:28:7a:30:58:70:25:0b:9e:a3:eb:28:7f:7e:c9:
         da:65:61:44:e9:38:84:80:cf:8d:b3:e7:dc:c6:36:20:8c:6d:
         03:b9:39:75:92:e3:ee:03:5e:02:03:f3:94:00:e3:9e:cd:1a:
         de:f2:45:1a:f2:a5:b8:c1:c1:98:64:bd:e1:2b:28:10:ee:22:
         e3:9c:64:d6:2f:66:f7:e4:96:54:f7:ae:76:0c:b6:91:07:cf:
         b3:dd:0a:00:2e:ee:3e:3a:dd:fb:89:25:53:39:fa:13:4a:18:
         58:ad:5f:4d:fa:4c:c4:5c:39:ea:2f:44:cb:02:93:2e:a0:9f:
         d4:ab:f1:4e:a2:67:87:45:39:c7:f5:7c:62:5f:f7:35:9a:8e:
         23:d2:d1:c8:93:0d:4e:c4:dc:1c:08:a8:d7:7d:ac:cf:e9:71:
         32:0b:c3:89:65:c1:a9:66:44:3c:cb:6b:b6:d4:90:29:d0:08:
         bb:38:2a:a1:04:c8:76:9d:d4:7c:18:53:ef:69:42:54:b5:9d:
         bd:7f:be:9b:8b:67:25:d1:09:25:04:c8:1e:fb:f4:e6:6c:28:
         1d:52:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----